General
- Target 2026-07-24_130243b91acf168611fb2526a5efc59e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260724-b3wveseq5w
- SHA256 6e3cf7650c8dc86b567a4e9ac909a9f2ce0cc792cd20a2a8777863dadbde93de
- MD5 130243b91acf168611fb2526a5efc59e
- SHA1 9d27b94d113e9f5dec451cb79f7664621145a421
- SHA512 37874883732b4a8dee32dbff08ec1808ecc1193f019a8425ccc469eb6d9491959041d711c5d879a11b69aa298bf9e9aafd33ab1e8dd1e0b43d108db9e5a27d83
- SSDEEP 12288:GwKfOVRo9yRYnHa4O8b8ITDnlA0Q5boYbyJS/INFOdn/BXwqIq92KQfftHCMN:GxWVeyRYnHa4O8b8ITDnl/CIqkfF1N
- TLSH T1DC85C56373E88217F6F3FB3099B45670AA3ABC6DAE74D14E6240335E1971A90CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_130243b91acf168611fb2526a5efc59e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_130243b91acf168611fb2526a5efc59e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_130243b91acf168611fb2526a5efc59e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 6e3cf7650c8dc86b567a4e9ac909a9f2ce0cc792cd20a2a8777863dadbde93de
- MD5 130243b91acf168611fb2526a5efc59e
- SHA1 9d27b94d113e9f5dec451cb79f7664621145a421
- SHA512 37874883732b4a8dee32dbff08ec1808ecc1193f019a8425ccc469eb6d9491959041d711c5d879a11b69aa298bf9e9aafd33ab1e8dd1e0b43d108db9e5a27d83
- SSDEEP 12288:GwKfOVRo9yRYnHa4O8b8ITDnlA0Q5boYbyJS/INFOdn/BXwqIq92KQfftHCMN:GxWVeyRYnHa4O8b8ITDnl/CIqkfF1N
- TLSH T1DC85C56373E88217F6F3FB3099B45670AA3ABC6DAE74D14E6240335E1971A90CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory